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IN THE SPECIFICATION 

Please replace the paragraph extending from page 3, line 3 to page 3, line 9 with the 
following new paragraph: 

The aforementioned needs are addressed by the present invention* Accordingly 
there is provided[[WVI] a wildcarded security policy method. The method includes 
associating wildcarded resource identifiers with a corresponding security policy, A 
resource identifier received in ail access request is matched to one of a list of said 
wildcarded resource identifiers^-;]]^ Matching is determined in accordance with a 
predetermined set of precedence values, each precedence value of the set corresponding 
to a predetermined wildcard element. 

Please replace the paragraphs extending from page 9, line 4 through page 10, line 1 8 with 
the following new paragraphs: 

Refer now to FIGURE 5 illustrating methodology 500 for generating an ordered 
list of wildcarded identifiers. In step 502, a wildcarded identifier list is generated, fa 
order An ordered list of wildcarded identifiers may be generated in accordance with the 
principles of the present invention by steps 504-5 1 8 in conjunction with a sorting routine 
such as are known in the data processing art. ©nee One such routine is known as a 
Heapsort. See e.g. WILLIAM H. PRESS ET AL., NUMERICAL RECIPES 229-232 
(1986), Other sorting routines fc known in the art, which may be used are insertion 
techniques. See id. at 227-229. In each of these, a pairwise ordering of wildcarded 
indentifiers are relatively ordered, thus, in step 504, a pair of wildcarded identifiers to be 
relatively ordered is selected in accordance with the particular sorting algorithm being 
used. The relative ordering is then established in accordance with steps 506-514. 

In step 506, the first element in each identifier of the pair selected in step 504 are 
selected. The first element of each identifier of the pair is selected in accordance with 
the direction for matching selected in step 402, FIGURE 4. In step 508, it is determined 
if the elements selected have the same precedence. The precedence is determined in 
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accordance with a precedence table. A precedence table which may be used in an 
embodiment of the present invention [[&]] is shown in FIGURE 6. Wildcard elements 
are listed in decreasing precedence in column 604 of table 600. (For the purpose herein, a 
"character range" refers to some finite set of characters. When matching a resource string 
if a character, when being matched against a corresponding character range element in 
the wildcarded identifier, a match is said to occur if the character [[is]] in the resource 
string ia contained in the set of characters represented by the character range, 
Additionally, any wildcarded identifier element may be marked as repeating in which 
case the element will match one or more occurrences of matching characters in the 
resource identifier.) A precedence value is associated with each type of wildcard element, 
as shown in coluinn 602 of table 600. Note t bat lower numerical precedence values are 
associated with higher precedence, and com ersely higher numerical precedence values 
are associated with elements having lower p necedence in the embodiment of the present 
invention corresponding to table 600. However, an embodiment of the present invention 
in which higher numerical precedence are a* sociated with wildcard elements having 
higher precedence could be used, and such € mbodiments which fall within the spirit and 
scope of the present invention. (These alternative embodiments would correspond to, for 
example, in the ordering algorithm being us ?d to correspond with a binary relationship 
"greater than" between parrwise elements, a id a binary relationship "less than" between 
element pairs, respectively,) 

Returning to FIGURE 5, if, in step |ji0&]] 508. the element pairs being compared 
have the same precedence, that in step 610 1 ion instep 510 the next elements in each 



identifier of the pair are selected , step 510 a ad compared by returning to step 508. In 
other words, process 500 loop through elemjents of each identifier pair until a mismatch 
in precedence is found. 
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